Installing CA Enterprise Log Manager - CA Technologies

Glossaryaccess filteraccess policyaccountaction alertaction queryAdministrator roleagentAn access filter is a filter that the Administrator can set to control what eventdata non-Administrator users or groups can view. For example, an access filtercan restrict the data specified identities can view in a report. Access filters areautomatically converted into obligation policies.An access policy is a rule that grants or denies an identity (user or user group)access rights to an application resource. CA Enterprise Log Manager determineswhether policies apply to the particular user by matching identities, resources,resource classes, and evaluating the filters.An account is a global user who is also a CALM application user. A single personcould have more than one account, each with a different user-defined role.An action alert is a scheduled query job, which can be used to detect policyviolations, usage trends, login patterns, and other event actions that requirenear-term attention. By default, when the alert queries return results, the resultsare displayed on the CA Enterprise Log Manager Alerts page and are also addedto an RSS Feed. When you schedule an alert, you can specify additionaldestinations, including email, a CA IT PAM event/alert output process, and SNMPtraps.An action query is a query that supports an Action Alert. It is run on a recurringschedule to test for the conditions outlined by the Action Alert to which it isattached.The Administrator role grants users the ability to perform all valid actions on allCA Enterprise Log Manager resources. Only Administrators are permitted toconfigure log collection and services or manage users, access policies, andaccess filters.An agent is a generic service configured with connectors, each of which collectsraw events from a single event source and then sends them to a CA EnterpriseLog Manager for processing. Each CA Enterprise Log Manager has an onboardagent. Additionally, you can install an agent on a remote collection point andcollect events on hosts where agents cannot be installed. You can also install anagent on the host where event sources are running and benefit from the ability toapply suppression rules and encrypt transmission to the CA Enterprise LogManager.Glossary 249